Revolut sent identity data, contact details, and documents to hackers posing as a government agency
Revolut is now being asked to pay a humongous ransom demand to keep the data private.
Revolut, a digital banking platform, recently fell victim to a sophisticated phishing scam that resulted in the theft of sensitive customer data. The attackers, posing as a government agency, successfully tricked Revolut into sending a trove of personal information, including IDs, selfies, account statements, IBANs, and full transaction histories.
The compromised data also includes customers' birth dates, postal and email addresses, occupation, phone numbers, and verification selfies. Additionally, account withdrawal records, transaction histories, and Bitcoin transactions may have been exposed. According to reports, criminals are now leaking the stolen data on Telegram, demanding a ransom of 10,000 BTC (~$780M) in exchange for its deletion.
Revolut has blocked the fraudulent email address and alerted relevant authorities, but the extent of the data breach remains unclear. The company's spokesperson stated that only a "very limited" number of customers are affected, and all have been notified. Cybersecurity experts warn that the leak poses a significant threat to affected customers, as the stolen data could be used for identity theft and fraud.
Written by urgent.news from TechRadar's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
